[jboss-dev-forums] [Design of EJB 3.0] - Re: Pulling security out as a separate module

[wolfc]

We need a more stable core and a more stable security implementation. So everything mandated in chapter 17 should be in one component. The only question is whether that component is EJB 3 specific or just EJB. My guess is that's actually a general security component with an aspect on top of it. The aspect should then be in jboss-aspects-security as long as it does not require any EJB API classes (so some configuration like exceptionType thrown should be configurable).

If there is anything EJB 3 specific in chapter 17, then that should go in ejb3-security.

If it's easier for the moment to have everything in ejb3-security, then make it so. We can separate out the generic stuff later on.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4143826#4143826

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4143826